https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 03:11:50 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-217414 EUVD-2026-217414 https://cve.radiocsirt.org/vuln/euvd-2026-217414 https://cve.radiocsirt.org/vuln/fkie_cve-2024-34147 <p>Jenkins Telegram Bot Plugin 1.4.0 and earlier stores the Telegram Bot token unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system.</p> <p>Jenkins Telegram Bot Plugin 1.4.0 and earlier stores the Telegram Bot token unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-34147 https://cve.radiocsirt.org/vuln/ghsa-94pr-w968-h923 <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:telegrambot</p> <p>Jenkins Telegram Bot Plugin 1.4.0 and earlier stores the Telegram Bot token unencrypted in its global configuration file `jenkinsci.plugins.telegrambot.TelegramBotGlobalConfiguration.xml` on the Jenkins controller as part of its configuration.</p> <p>This token can be viewed by users with access to the Jenkins controller file system.</p> <p>As of publication of this advisory, there is no fix.</p> <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:telegrambot</p> <p>Jenkins Telegram Bot Plugin 1.4.0 and earlier stores the Telegram Bot token unencrypted in its global configuration file `jenkinsci.plugins.telegrambot.TelegramBotGlobalConfiguration.xml` on the Jenkins controller as part of its configuration.</p> <p>This token can be viewed by users with access to the Jenkins controller file system.</p> <p>As of publication of this advisory, there is no fix.</p> https://cve.radiocsirt.org/vuln/ghsa-94pr-w968-h923 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1018 <p>Ein Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um beliebigen Code im Kontext des Dienstes auszuführen, Sicherheitsmaßnahmen zu umgehen oder vertrauliche Informationen offenzulegen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um beliebigen Code im Kontext des Dienstes auszuführen, Sicherheitsmaßnahmen zu umgehen oder vertrauliche Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1018